Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

pike: SQL injection

Package(s):

pike

CVE #(s):

Created:

August 7, 2006

Updated:

August 9, 2006

Description:

Some input is not properly sanitized before being used in a SQL statement in the underlying PostgreSQL database. A remote attacker could provide malicious input to a pike program, which might result in the execution of arbitrary SQL statements.

Alerts:

Gentoo

200608-10

2006-08-06

(Log in to post comments)